nerdexam
Cisco

350-701 · Question #66

What is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?

The correct answer is C. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX. The crypto isakmp key command is used in Cisco IOS to configure a pre-shared key for IKEv1 peers within a specified IP address range.

Submitted by anjalisingh· Mar 30, 2026Network Security

Question

What is the result of running the crypto isakmp key ciscXXXXXXXX address 172.16.0.0 command?

Options

  • Aauthenticates the IKEv2 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
  • Bauthenticates the IP address of the 172.16.0.0/32 peer by using the key ciscXXXXXXXX
  • Cauthenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX
  • Dsecures all the certificates in the IKE exchange by using the key ciscXXXXXXXX

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    11% (2)
  • C
    78% (14)
  • D
    6% (1)

Why each option

The `crypto isakmp key` command is used in Cisco IOS to configure a pre-shared key for IKEv1 peers within a specified IP address range.

Aauthenticates the IKEv2 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXX

The command `crypto isakmp key` is used for IKEv1, not IKEv2.

Bauthenticates the IP address of the 172.16.0.0/32 peer by using the key ciscXXXXXXXX

When `address` is used with a classful network address (like 172.16.0.0) without a mask, Cisco IOS defaults to the classful subnet mask (e.g., /16 for a class B address), not a /32 host address.

Cauthenticates the IKEv1 peers in the 172.16.0.0/16 range by using the key ciscXXXXXXXXCorrect

The `crypto isakmp key` command is specifically for configuring IKEv1 pre-shared keys. When `address 172.16.0.0` is used without a subnet mask, it implicitly refers to the class B network 172.16.0.0/16, meaning it authenticates IKEv1 peers whose IP addresses fall within that range using the specified pre-shared key.

Dsecures all the certificates in the IKE exchange by using the key ciscXXXXXXXX

This command configures a pre-shared key for authentication, not for securing certificates in an IKE exchange, as certificates use their own trust infrastructure.

Concept tested: Cisco IOS IKEv1 pre-shared key configuration

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike/command/ike-cr-book/ike-cr-k-p.html#wp1074092

Topics

#IKEv1#ISAKMP#pre-shared key#VPN CLI

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 350-701 Practice